DPZC-5/web/website-bucket-policy.json

{
  "Version": "2012-10-17",
  "Id": "MyPolicy",
  "Statement": [
      {
          "Sid": "PublicReadForGetBucketObjects",
          "Effect": "Allow",
          "Principal": "*",
          "Action": "s3:GetObject",
          "Resource": "arn:aws:s3:::invoices-ocr/*"
      }
  ]
}